CVE-2021-46459 in Victorinformation

Résumé

par MITRE • 31/01/2022

Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilities can be exploited through a crafted POST request via the user_name, user_firstname,user_lastname, or user_email parameters.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Réserver

24/01/2022

Divulgation

31/01/2022

Modérer

accepté

Entrée

VDB-192030

CPE

prêt

EPSS

0.01370

KEV

non

Activités

très faible

Secteur

Agriculture, Hostingprovider, ...

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2021-46459
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2021-46459
CVE Detailshttps://www.cvedetails.com/cve/CVE-2021-46459/

◂ PrécédentAperçuSuivant ▸

Interested in the pricing of exploits?

See the underground prices here!